Security MCP servers

Screen names against OFAC, EU and UN lists; check CVEs, domain DNS and WHOIS, and public tenders

Query your team's drift, vulnerability, and upgrade data from any AI assistant. OAuth 2.1, 51 tools.

Find, vet, and run MCP tools through a secure audited gateway with prompt-injection risk scoring

Email-domain intelligence: MX capability, provider, disposable status, SPF, DMARC, and MTA-STS.

Resolve @handles to post-quantum-signed agent identities and transact with the brands behind them.

Redact PII from text before it reaches a model. Nothing stored, no third-party AI.

Cybersecurity market intelligence: funding rounds, M&A, investors, valuations, corporate lineage.

Identity verification, document checks, sanctions/PEP screening and case review as agent tools.

Solana address risk grades and token scans for AI agents. Pay-per-call via x402 (USDC on Base).

Verify emails and domains for routing, disposable providers, role accounts, and SMTP risk.

Confidential compute and inference sold to agents over x402 USDC, plus an agent wallet over MCP.

Signup sessions, browser continuity, email, SMS, and OTP/TOTP infrastructure for AI agents.

Audit GitHub repos for malicious and supply-chain code before you depend on them.

Inventory of your service accounts, kept current by your coding agents. Metadata only, no secrets.

Programmatic control of the Hiro security platform: scans, tasks, plans, and approvals.

Security reviews for coding agents: diffs checked against your org policy and live infrastructure.

Privacy-first document verification anchored to the public ledger.

See, price, and control every tool call your AI agents make: policy checks, cost, and audit tools.

Deterministic runtime safety for AI agents: scan PII, gate tool actions, verify LLM output.

Issue, rotate and revoke scoped API-key passes for 25+ providers — the agent never sees a real key

CISA KEV status and EPSS scores for CVE IDs, ranked P1/P2/P3 for patching, via Apify.

Known vulnerabilities and fixed versions for npm, PyPI, Go, Maven packages from OSV.dev via Apify.

Code review for diffs: rule-based checks for leaked secrets, unsafe migrations and more.

Managed MCP gateway with OAuth, per-agent permissions, shared accounts and activity logs.

Authorized security scans, evidence, fix prompts and retests for AI-built web apps.

Domain enrichment: email provider, DMARC/SPF/DKIM, WHOIS age, SSL, hosting and CDN per domain.

Trusted execution infrastructure for AI agents. Proposal-only protocol with human consent.

Audit GitHub Actions workflows for script injection, unpinned actions and missing permissions.